Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919D772/C625FF2E6A6311E9B9DAFC6DC4F9AE02/IedJniGAvSEvqqDRUh0WVnfYve4.mft
File:                     IedJniGAvSEvqqDRUh0WVnfYve4.mft (raw, json)
Hash identifier:          yAly7qBt80jm69Ym2lfJa6goCgSQrMSb7lRL+veaDM0=
Subject key identifier:   8A:88:48:99:EE:3B:B8:6F:45:51:3B:B3:58:A3:A8:A6:99:5C:DD:62
Authority key identifier: 21:E7:49:9E:21:80:BD:21:2F:AA:A0:D1:52:1D:16:56:77:D8:BD:EE
Certificate issuer:       /CN=A919D772/serialNumber=21E7499E2180BD212FAAA0D1521D165677D8BDEE
Certificate serial:       0ED4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IedJniGAvSEvqqDRUh0WVnfYve4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919D772/C625FF2E6A6311E9B9DAFC6DC4F9AE02/IedJniGAvSEvqqDRUh0WVnfYve4.mft
Manifest number:          0EA9
Signing time:             Thu 14 Mar 2024 01:56:57 +0000
Manifest this update:     Thu 14 Mar 2024 01:56:56 +0000
Manifest next update:     Thu 21 Mar 2024 01:56:56 +0000
Files and hashes:         1: IedJniGAvSEvqqDRUh0WVnfYve4.crl (hash: 6SlWtQ5/zCvznHy2PNg9Zk+KuI7kyTEAHzm+QNnG1WI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3796 (0xed4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919D772/serialNumber=21E7499E2180BD212FAAA0D1521D165677D8BDEE
        Validity
            Not Before: Mar 14 01:56:56 2024 GMT
            Not After : Mar 21 01:56:56 2024 GMT
        Subject: CN=65f25968-f701
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f1:79:f9:61:72:7f:a7:b8:1f:f0:d5:5a:6b:
                    59:fb:73:63:2f:ae:dd:65:41:ed:fb:dd:57:df:d1:
                    5e:42:06:7b:fc:a1:0f:56:a4:4a:02:be:45:c7:58:
                    d5:58:1f:6f:f3:55:2f:a7:2e:c8:79:c1:17:74:0d:
                    ed:ba:da:c9:48:b0:c7:0c:93:34:9c:48:e5:b2:eb:
                    06:56:21:c0:1c:24:ff:80:77:a1:37:22:26:fd:bf:
                    10:6a:74:75:e4:c2:bc:a9:1c:2b:9c:4e:3a:88:94:
                    6d:99:03:94:87:c2:62:d6:64:d6:0b:ad:61:a0:25:
                    5f:a7:a0:0a:3d:3d:e3:14:e0:2b:cf:77:15:86:81:
                    e7:b0:6f:3e:b8:1d:11:86:16:3b:57:55:28:f4:26:
                    60:f3:2d:2b:bd:06:cd:70:af:b0:c0:06:cc:77:71:
                    1e:9c:06:c9:1b:04:d5:43:25:41:ca:8c:ee:0e:82:
                    37:5c:41:b4:8a:01:2c:fa:4f:ec:bb:f7:e6:c3:26:
                    5c:bb:a2:ff:c9:2e:06:93:67:bb:2f:c2:0c:ac:72:
                    88:90:b7:b6:ef:a4:0d:b4:41:92:57:8d:1f:8c:e9:
                    e7:57:f7:47:59:aa:91:45:16:1b:61:a3:c8:c2:eb:
                    17:63:25:d1:dd:89:c3:fd:1a:da:0f:13:cb:ff:31:
                    7d:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:88:48:99:EE:3B:B8:6F:45:51:3B:B3:58:A3:A8:A6:99:5C:DD:62
            X509v3 Authority Key Identifier:
                keyid:21:E7:49:9E:21:80:BD:21:2F:AA:A0:D1:52:1D:16:56:77:D8:BD:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919D772/C625FF2E6A6311E9B9DAFC6DC4F9AE02/IedJniGAvSEvqqDRUh0WVnfYve4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IedJniGAvSEvqqDRUh0WVnfYve4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D772/C625FF2E6A6311E9B9DAFC6DC4F9AE02/IedJniGAvSEvqqDRUh0WVnfYve4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:73:4c:5b:20:da:91:3d:d8:08:a2:db:96:b3:36:fd:96:4d:
         b2:86:9a:aa:6c:25:f1:8b:7d:61:69:f7:80:72:f5:c3:43:b1:
         7a:f4:3f:ed:df:fc:a8:3a:15:44:21:c8:a2:0b:5c:fb:5d:7e:
         b5:54:ab:11:b0:b6:41:dc:de:4a:c9:c7:dc:aa:45:a9:6b:f2:
         be:28:9c:a3:5e:a1:7f:c0:5b:83:8e:b6:c0:c3:7d:06:9d:9d:
         ae:46:2e:f5:da:dd:09:9a:27:5d:52:a7:6d:a7:58:78:26:20:
         55:ae:16:9b:a6:a9:55:74:5d:5c:0e:c9:56:e0:01:1a:f4:dd:
         2f:b9:1e:a4:b9:ff:36:17:0b:c3:b0:11:75:5a:f6:51:a6:c8:
         a7:a0:af:39:12:cc:9e:97:f5:46:ea:99:9f:bf:a7:a8:69:83:
         ae:4c:02:c3:f6:55:45:d7:ab:0f:a8:e4:62:71:5e:7e:6e:8d:
         49:b3:b2:90:50:04:0c:db:81:97:1c:a6:be:f8:01:a9:ff:30:
         4a:7c:34:b1:80:cf:95:36:c2:03:41:87:e4:7e:0e:25:1a:36:
         df:66:f2:03:d7:13:e9:66:3b:7a:94:0e:01:f5:50:0f:f9:0c:
         7f:30:53:5e:f1:69:bc:b3:1f:71:9e:c6:e0:82:9a:eb:4d:ee:
         03:82:60:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----